Risk management and internal audit
Robust and agile risk management is essential to drive sustainable and responsible growth. The Group continually strengthens and embeds sound risk management practices across all its operations.
Managing risks
Actively managing our risks remains pivotal to the long-term success of our business and to the achievement of our strategic business objectives. Our risk management approach remains effective, grounded in an integrated governance structure that fosters sound risk practices and employs comprehensive, structured processes to evaluate, respond to, and monitor risks.
Enterprise risk management
The Enterprise Risk Management (ERM) framework is established to identify, assess, and mitigate risks, minimising their potential impact while supporting the company’s long-term purpose and business strategy. Annually, a top-down risk assessment is conducted at the Group level, alongside a bottom-up assessment performed across subsidiaries. The aggregation of these assessments provides a comprehensive understanding of the Group’s risk landscape, enabling clear ownership and targeted actions to effectively manage and address identified risks
Internal audit
The Internal Audit function provides independent and objective assurance, as well as advisory services, to enhance and support the ER Group’s operations. It adds value by assisting management in identifying and managing risks, and by improving governance processes. Furthermore, Internal Audit helps the Board fulfil its responsibility to uphold and strengthen the organisation’s internal control framework.